#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
SKILL_ROOT="$(dirname "$SCRIPT_DIR")"
source "$SCRIPT_DIR/_common.sh"

: "${REGISTRY_PORT:=5000}"

main() {
  local status="$SKILL_ROOT/outputs/status_matrix.json"
  local ok_container=false ok_http=false

  if docker ps --format '{{.Names}}' | grep -q registry; then ok_container=true; fi
  if curl -fsS "http://127.0.0.1:${REGISTRY_PORT}/v2/" >/dev/null 2>&1; then ok_http=true; fi

  blockers="[]"
  if [[ "$ok_container" != "true" ]]; then blockers='["registry_not_running"]'
  elif [[ "$ok_http" != "true" ]]; then blockers='["registry_http_unreachable"]'
  fi

  cat > "$status" <<EOF
{
  "skill": "container-registry",
  "timestamp": "$(date -Iseconds)",
  "checks": [
    {"name":"container_running", "ok": $ok_container},
    {"name":"registry_http", "ok": $ok_http}
  ],
  "blockers": $blockers,
  "warnings": [],
  "next_steps": [
    "Configure TLS via reverse proxy or tunnel",
    "Integrate image signing (cosign/notation)",
    "Proceed to dns-sovereign"
  ]
}
EOF

  log_info "Wrote $status"
  cat "$status"
}
main "$@"